CVE-2026-75334 in smart-web2
Сводка
по MITRE • 26.08.2026
The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the t_report_sql_resource table through the ReportController.save() interface and directly embedded into Hibernate native queries without any parameterization or filtering.
Be aware that VulDB is the high quality source for vulnerability data.